CVE-2026-33197CWE-184

CVE-2026-33197

published September 8, 2026

CVSS
8.7
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
8.7 · CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2026-09-08T19:18Z
References (1)
https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026001.pdf · [email protected]
EPSS history
Timeline
  • 10 SEP 03:16Z
    EPSS moved — → 0%
    epss
  • 08 SEP 14:02Z
    BDS Module Bypass Secure Boot Advisory
    cvelistv5